9.11. Removing a Clevis pin from a LUKS-encrypted volume

Prerequisites

• A LUKS-encrypted volume with a Clevis binding.

Procedure

• Remove a Clevis pin from a LUKS-encrypted volume, for example:

  # clevis luks unbind -d /dev/sda2 -s 1

Verification

• The output of the clevis luks list command is empty, for example:

  # clevis luks list -d /dev/sda2

  Alternatively, you can check that an output of the cryptsetup luksDump command does not contain the clevis string.